- Add widgets
- Survey Comparison
- Heatmap
- Confidentiality Settings
- eNPS in Workforce Analytics Portal
- Notes Widget
- Text Analysis Widget
- Response rate
- Text Report
- Trend analysis widget
- Show/hide Markers and Building blocks
- Question Filter
- Single Question Widget
- Heatmap default
- Sentiment analysis
- Scorecard
- Driver analysis
- Scorecard: All options view
- Heatmap Column Types
- Multiple Tabs in a Dashboard
- Tab Exports
- AI Summary and Recommendations
- 360 feedback introductory text
- 360 feedback display configurations
- 360 feedback display labels
- Multi Level Priority Logic
- 360 Surveys- Priority Model
- 360 feedback - skip logic
- 360 feedback - show hide question logic
- 360 Survey Settings
- 360 feedback configuration
- Customize the validation text
- 360 Survey design
- 360-Reorder section
- 360 Section Type - Single Select Section
- 360 Delete Sections
- 360 Add Sections
- 360 section type - Free responses text section
- 360 Section Type - Presentations text section
- 360 Section-Edit Configurations
- 360 Survey- Languages
- Matrix section
Single Sign-On (SSO) Authentication for EX Lifecycle Surveys
Employee Experience (EX) Lifecycle Surveys (ranging from onboarding check-ins to exit interviews) capture some of the most sensitive qualitative and quantitative sentiment data within an organization. Safeguarding this data against unauthorized access while ensuring friction-free participation is a vital imperative for modern HR and Security operations.
Integrating SAML 2.0 Single Sign-On (SSO) with QuestionPro Employee Experience establishes a zero-trust security perimeter around your employee feedback ecosystem. By delegating identity verification to your enterprise Identity Provider (IdP) (such as Okta or Microsoft Azure AD / Microsoft Entra ID) you eliminate password fatigue, enforce multi-factor authentication (MFA), instantly revoke survey access upon employee offboarding, and ensure that only verified, active workforce members can submit response data.
To configure and enforce SAML 2.0 SSO using Okta as your Identity Provider, follow these steps:
- While setting up the SSO login authentication using Okta as IDP, when you upload the metadata file it contains a Single Sign On URL which is fetched by the tool and populated in the "Single Sign On URL" input field. This URL is used to redirect the respondent to the IDP for authentication when they try to answer the survey.
- After the above set up you'll get a new survey authentication option under Survey >> Settings >> Security named as "(Organization Name) SAML". Select this option and click on Save Changes.
- For the existing SAML SSO login authentication set up, you'll need to copy the SSO URL from Okta and paste it in the Single Sign On URL input field and click on Save Changes. To get the SSO URL from Okta follow the steps below:
- Go to the existing application in your Okta account then under the Sign On tab Copy Metadata URL.
- You can pass the additional user data from Okta to QuestionPro survey response by passing them as attributes in the XML Assertion. While setting up the application in Okta you can define the attributes under Configure SAML tab. Here you can provide any name to the attribute and select the value from the drop-down menu.
To configure and enforce SAML 2.0 SSO using Microsoft Azure AD (Entra ID) as your Identity Provider, follow these steps:
- Log in to your Azure portal.
- Create a new Enterprise application under Microsoft Entra ID.
- Open the app and click Set up single sign on.
- Select the single sign-on method as SAML.
- Now click on the pencil icon to edit the Basic SAML Configuration.
- Under Basic SAML Configuration, add https://www.questionpro.com/saml2 under Identifier (Entity ID) field and paste the ACS URL from your QuestionPro account into the Reply URL (Assertion Consumer Service URL) field. Click Save.
- Click the pencil icon to edit Attributes and Claims.
- Click Add new claim. In the next page that opens, enter the Name of the attribute as emailAddress and select the Source attribute as user.mail. Click Save.
- Scroll to the bottom of the Single sign-on page. Under SAML Certificates, click the Download link next to Certificate (Base64). Then, copy the Login URL, Microsoft Entra Identifier, and Logout URL.
- Go to your QuestionPro account and navigate to User Profile >> My Account. Under SSO Authentication, select SAML (Signed) from the drop-down menu and choose Manual Settings as the Configuration Type. Paste the values from your Azure app as follows: Microsoft Entra Identifier → Issuer / Entity ID in QuestionPro. Login URL → Single Sign-On URL in QuestionPro. Logout URL → Logout URL in QuestionPro. Upload the certificate you downloaded from Azure by clicking the Choose file button. Click Save.
- To test your SSO connection, go to the Single sign-on page in your Azure application and scroll to the bottom. Click the Test button, then in the right-side pop-up, click Test sign in. You will be logged directly into your QuestionPro account.
- To assign the application to users, Open your Azure application and click Users and groups under “Manage” in the left navigation. Then click Add user/group.
- Click the Users section. On the right-side pop-up search for and select the user or group to whom you want to assign the application, then click Select at the bottom.
